TIBCO Enterprise Message Service is a standards-based messaging solution that can serve as the backbone of a Service Oriented Architecture (SOA) by providing Java Message Service (JMS) compliant communications across a wide range of platforms and application technologies. It reduces the complexity of integrating disparate systems with a platform-neutral, broker-based approach to a messaging integration backbone, laying the foundation for a move towards real-time event-driven architecture. TIBCO Enterprise Message Service supports high scalability, fault tolerance, and authentication features to meet enterprise-level messaging requirements.

TIBCO Enterprise Message Service

Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before 8.3.0 and EMS Appliance before 2.4.0 allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via crafted inbound data.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2018-12415	HIGH	8.8	TIBCO Enterprise Message Service	cpe:2.3:a:tibco:enterprise_message_service	No	Yes	Nov 06, 2018
CVE-2016-3628	HIGH	8.8	TIBCO Enterprise Message Service	cpe:2.3:a:tibco:enterprise_message_service	No	Yes	Apr 20, 2016
CVE-2021-28822	HIGH	7.8	TIBCO Enterprise Message Service	cpe:2.3:a:tibco:enterprise_message_service	No	No	Mar 23, 2021
CVE-2021-28821	HIGH	7.8	TIBCO Enterprise Message Service	cpe:2.3:a:tibco:enterprise_message_service	No	No	Mar 23, 2021
CVE-2011-0649	HIGH	7.2	TIBCO Enterprise Message Service	cpe:2.3:a:tibco:enterprise_message_service	No	Yes	Feb 04, 2011

CVE-2016-3628:
TIBCO Enterprise Message Service vulnerability analysis and mitigation

8.8

Related TIBCO Enterprise Message Service vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2016-3628: TIBCO Enterprise Message Service vulnerability analysis and mitigation